Strange routes in my router

trange Routes in my Router
Hi,
Yesterday, I logged in my Linksys router and I found the same strange route appearing multiple times and I have no clue where it is coming from. All my computers are virus free and I am using firewalls on all of them. The router is password protected. Also, RIP is disabled on the router.
Anyhoo, I resetted the router and the routing table went back to normal. Now, today, I log in again in the router and I see these routes again. Here are the strange routes:
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
0.0.0.0 124.171.0.0 180.207.2.208 207 LAN
Anybody ever seen this?
How can the same route be added over and over again?
Thanks

 Yes, it is a very weird Subnet Mask.
Destination LAN IP    Subnet Mask    Default Gateway    Hop Count    Interface
0.0.0.0    0.0.0.0    XXX.XXX.XXX.XXX    1    WAN
128.60.31.208    124.171.0.0    180.207.2.208    207    LAN
0.0.0.0    124.171.0.0    180.207.2.208    207    LAN
0.0.0.0    124.171.0.0    180.207.2.208    207    LAN
0.0.0.0    124.171.0.0    180.207.2.208    207    LAN
0.0.0.0    124.171.0.0    180.207.2.208    207    LAN
0.0.0.0    124.171.0.0    180.207.2.208    207    LAN
 On the status page, there is no gateway address. But if I look in the routing table, the route of last resort points to my provider and is OK.
Anyhoo, a route that points to Asia is pretty suspect to me.

Similar Messages

  • Routing Engine: Transform route Response to another CRS

    Hi.
    We use Oracle 10gR2 routing engine for routing Europe.
    We have to keep spatial data in one coordinate reference system (CRS) at the DB level and visualize it using another in our application. When it comes to routing, we would like to make the routing engine issue a transformation of linestring coordinates from one CRS, in which data is held to the other, in which the route is to be visualized. Currently, the routing engine returns a geometry in the CRS, we do not want to use for visualizing.
    Is there a simple way of making the routing engine do so? Maybe by changing SQL generated within the routeserver.jar to do the transformation using Oracle packages...
    Cheers
    Sebastian.

    Sebastian,
    We will definitely consider this. We need to enhance the
    route request to support this.
    Unfortunately there is no simple way to generate this from the routerserver.jar.
    You need to do an explicit call to the DB to transform the router geometry
    to the desired CRS.
    Are you using MapViewer for visualization ?
    MapViewer can do CRS transformation on the fly for visualization.
    siva

  • I have a hard drive for CD storage that needs to connect to the Ethernet router. sInce my router is not in this room, and in another room, I want to use my Mac as a router for the drive, and share the wifi. Ho do I do this

    I have a hard drive for CD storage that needs to connect to the Ethernet router. sInce my router is not in this room, and in another room, I want to use my Mac as a router for the drive, and share the wifi. Ho do I do this? I gace tried the System Preferences -> Sharing, shared internet to Ethernet, but can't se ethe device on Finder

    Djembe wrote:
    UEFI (unified extensible firmware interface) boot requires Global unique identifier Partition Table (GPT) as opposed to the older Master Boot Record (MBR). If your existing drive is formatted in MBR, you will need to adjust BIOS settings to enable legacy boot in order for it to work properly.
    Is there a performance difference between GPT and MBR? If GPT is better, I do not mind formatting the drive with it.
    5. No special drivers are needed.
    Thanks. What about the thunderbolt port?
    7. I think Lenovo estimates 6 hours.
    Lenovo says 6 hours with the 6-cell battery on its website.
    BrendaEM wrote:
    Hi,
    There was a serious BIOS/UEFI problem with that SSD . Perhaps this thread will save you some headaches. Someone is recomending shutting off Rapid Boot in the setup, which would probable mean little with a SSD, anyway.
    I read through this, and it looks like the problem was fixed in a BIOS update, which I plan to do. However, it also seems like Intel Rapid Start is not even worth it in the first place, as sleep consumes almost no power at all.
    W540: i7-4700mq, K2100m, 8 GB DDR3L, 512 GB SSD
    T510: i7-620m, NVS 3100m, 8 GB DDR3, 512 GB SSD

  • I just purchased an Apple TV.  I have a pc running windows 7.  It is connected to a router and the router is connected to a wireless router.  I connect my iPhone, iPad and apple tv to wireless network but do not know how to put the pc on the wifi network

    I just purchased an Apple TV.  I have a pc running windows 7.  It is connected to a router and the router is connected to a wireless router.  I connect my iPhone, iPad and apple tv to wireless network but do not know how to put the pc on the wifi network so the Apple TV can do home share.

    I don't mean to be facetious but sometimes the simplest things are overlooked.  To connect to your library you have to have the computer where the iTunes library is located running and with iTunes open.  It also needs to be on the same network.  My network is dual band and works with either stream but a friend of mine does not.  He has to set the computer and the Apple TV to the same band.  Hope this helps.

  • Finding the shortest path router for the router tracking purpose

    Hi all,
    A Question asking you regarding to routers' tracking information.
    We keeps all the router infomation of our subnet in a file name "routers.txt" in this format:
    1 2 1
    2 4 1
    4 3 1
    1 3 5
    This states there are four routers, the distance between routers 1 and 2 is 1, between 2 and 4 is 1, etc.
    I need to write a Java program to keep track the shortest path between routers, I would understand that we can get this done easily in Java, but I am not a Java Savvy. I'm new in Java, would somebody help me to the right direction?
    In order to keep track the routers in our subnet easily,the output would look something like:
    Router 1
    To Router Distance Vector
    2 1 2
    3 3 2
    4 2 2
    Thanks very much,
    Cait.

    Hi kksenji,
    Well, because of the webform, it's not obvious to see. The output would be simple. From the input, for router 1 to router 2, the shortest distance is 1. For router 1 to router 3, the shortest distance is 3, for router 1 to router 4, the shortest distance is 2 and so on. The middle vector that it went through is 2 for every route. Hope this makes sense.
    Just try to solve the problem with the shortest distance, and I have a hard time to figure out the algorithm for this as well as how to get this started.
    Thanks, Cait.

  • EA6300 - Cascading the Linksys router to another router (LAN-LAN) - Does not Bridge built in Wifi AP

    Regarding: 
    http://kb.linksys.com/Linksys/ukp.aspx?pid=80&vw=1&articleid=3733#
    Cascading the Linksys router to another router (LAN-LAN)
    The Bridge mode function on the EA6300 does not bridge the Wifi AP radio to the network.
    The ethernet ports are bridged, and the router can see network devices and wifi devices connected to itand ping devices in both directions , but Wifi clients connecting to the unit running in bridge mode are not "bridged" to the network.
    ~
    Using the built in webpage of the router, all devices can be pinged.
    Ethernet RJ-45 devices plugged into it can ping the unit and pull up the units config webpage, but not ping wifi clients connected to it.
    Wfii devices connected to its access point radio, can pull up the units config webpage, but not ping ethernet RJ-45 devices connected to it.
    If there is a bridge, then the bridge is broken in half and not functional.
    ~
    All devices are set with IPs on the same subnet,  192.168.2.x
    ~
    I have a Netgear router in Bridge mode, and it works fine, connecting the wifi access point and RJ-45 ethernet clients together like it should be, so I know how Bridge mode... should work...
    But it doesn't on this unit, it is not working completely out the factory door.   It will bridge one Router to another via the RJ-45 ethernet ports, but its own AP radio is no longer bridged and connected (like when running in NAT
    Note that doing cascading  using NAT as described under "Cascading the Linksys router to another router (LAN-WAN)" works fine.

    Hi, 
    There's no WLAN bridge feature on the new Linksys Smart Wifi routers. You might also like to check and review these articles about Bridge Mode: 
    Article ID: 24583 - Setting up your Linksys Wi-Fi or Smart Wi-Fi Router to Bridge Mode
    Article ID: 25714 - Setting up your Linksys Smart Wi-Fi Router to Bridge Mode using your Linksys Smart Wi-Fi Account
    Hope this helps!
    If everyone needs to believe in something, I believe I'll have another beer..

  • WRT54G Wireless Router & RT31P2 Vonage Router

    I've had to guess how to set this up and thought I had everything ok.  Phone Connection still works, wireless network is recognized by my wireless laptop, my wired computer still works, but when I try to make the wireless connection from the laptop, it attempts to connnect, appears to connect, and then immediately drops the connection.
    Any suggestions?  I've had the Vonage wired connection with the RT31P2 router for over two years w/o any problems, thought I try to go wireless with a laptop so I could use it in other parts of the house.

    Firstly you need to make sure that the problem lies in the wireless router or wired router ... so connect the computer directly to the Vonage router ... observe the connection ... if working fine ... connect back the wireless router to the wired router ... now check the wireless settings on WRT54G ... under wireless use any non-linksys network name ... change the channel from 6 to 11 ...click save settings ... go to advance wireless settings ... do this settings .. Change the Beacon Interval to 75 >>Change the Fragmentation Threshold to 2304 Change the RTS Threshold to 2304 >>Click on "Save Settings"

  • Automatic Route Determination in Route Planning

    Hi,
    Can any one please help us with issues/disadvantages in adopting Automatic Route Determination in Route Planning in FI-TV if anyone had implemented it?

    Hi,
    Please refer this link:
    http://help.sap.com/saphelp_nw70/helpdata/de/43/44c35bd36157c0e10000000a155369/04_FI_EN.pdf
    Regards,
    Pramitha.

  • Using External Routing Service to Route the task

    Hi,
    I am using External Routing Service to Route the task and have placed the jar file at
    /oracle/app/product/fmw/Oracle_SOA1/soa/modules/oracle.soa.ext_11.1.1
    I have modified the Manifest.mf file for "oracle.soa.ext.jar" as
    Manifest-Version: 1.0
    Ant-Version: Apache Ant 1.7.1
    Created-By: 17.0-b17 (Sun Microsystems Inc.)
    Implementation-Vendor: Oracle
    Implementation-Title: Oracle SOA EXT
    Implementation-Version: 11.1.1
    Product-Name: Oracle SOA EXT
    Class-Path: ./routing/lib/jaxrpc.jar ./routing/lib/axis-update.jar ./routing/lib/axis.jar ./routing/lib/log4j-1.2.11.jar ./routing/lib/orabpel.jar ./routing/lib/bpm-services.jar ./routing/lib/xmlparserv2.jar ./routing/lib/wsdl4j-1.5.1.jar ./routing/lib/commons-discovery-0.2.jar ./routing/workflow.routing.jar
    Product-Version: 11.1.1.4.0
    Specification-Version: 11.1.1
    Extension-Name: oracle.soa.ext
    but it's failing to get the ExternalRoutingService.class and throws exception
    Missing class: ExternalRoutingService
         Dependent class: oracle.bpel.services.workflow.task.impl.RoutingSlipInterpretor
         Loader: weblogic.utils.classloaders.GenericClassLoader@2080514773
         Code-Source: /oracle/app/product/fmw/Oracle_SOA1/soa/modules/oracle.soa.workflow_11.1.1/bpm-services.jar
         Configuration: /oracle/app/product/fmw/Oracle_SOA1/soa/modules/oracle.soa.workflow_11.1.1/bpm-services.jar
    I tried adding the workflow.routing.jar to classpath (as this jar contains the ExternalRoutingService.class) and then gives error for IAssignmentService saying class not found IAssignmentService.class

    Hi Pranay,
    Did you find solution for this?
    I am also facing same issue.
    Thanks
    Balaji

  • Technical Routing Vs Logical Routing

    Hi Friends,
    Plz differentiale Technical Routing and Logical Routing

    <b>Routing</b>
    defines how the messages flow via XI (where to, via what) receiver and interface determinations in directory
    <b>Logical routing</b> involves the definition of business services/systems for your interface.i.e we difine the flow of messages in a system landscape
    <b>Technical routing</b> involves the definition of the communication channels, adapters, etc.
    From a general point of view, whenever you talk about logical routing as such, it deals with the security and authentication aspect. By mentioning the business sytems/services for the interface, you are clearly telling, which client and logical system name XI should talk to, to either send or receive data..
    .and technical routing involves exactly how the data will be sent or received.
    Routing is one of the steps of the pipeline process.
    Message was edited by:
            Raghavesh Reddy

  • Standard routing and rate routing

    Hi All,
    Can someone tell me what tables I should use to get the standard routing and rate routing for the query?
    Thanks
    Edward.

    Dear,
    Yes you are right.
    The main difference between routing and rate routing is you can not create parallel sequence in rate routing CA21 only nothing else.
    There are lot of different opinion on this topic but there is no too much difference in them only we use rate routing in REM and normal in Discrete manufacturing.
    Also check this thread ,
    Difference between routing and rate routing
    Hope clear to you.
    Regards,
    R.Brahmankar

  • Routing and rate routing

    Hi Gurus,
    Please explain me the difference between Routing and rate routing in details
    Thanks in advance
    Rupesh

    Hi,
    Functionality of Routing and rate routing is similar.
    Routing: It defines the sequence of operations that should be carried at a work center to make up a product.
    Routing is one of task list in PP module to carry out the production of finished and semi finished parts. it consists operation sequence which requires for manufacture finsihed and semi finished parts like operation 10. 20, 30...
    It is mostly used in Discrete Manufacturing
    Rate Routing: A routing for whose operations the production quantity and a fixed duration has been defined. Thus the production rate is also defined.
    Rate routings are used when you plan on a quantity basis, for example in repetitive manufacturing.
    With regards
    Ram Kumar

  • Router 2811 stop routing

    Hi all, I have a 2811 [Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(11)XJ, RELEASE SOFTWARE (fc1)] and I don´t know why, sometimes the router just stop routing. I perform a "show ip route" or "show arp" and seems to be everything ok. Interfaces are all up, and a site-to-site vpn active but no traffic between the sites.
    Does anybody know what could be happening or what command should I execute the next time?
    Best regards
    Carlos
    PD: Sorry for my english :-)

    !
    crypto isakmp policy 1
     encr aes 256
     authentication pre-share
     group 5
    crypto isakmp policy 10
     encr 3des
     authentication pre-share
     group 2
    crypto isakmp key **** address **** no-xauth
    crypto isakmp client configuration group vpn
     key voicentersdm
     pool SDM_POOL_1
     acl 100
     netmask 255.255.255.0
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto ipsec transform-set esp-aes256-sha esp-aes 256 esp-sha-hmac
    crypto dynamic-map SDM_DYNMAP_1 1
     set transform-set ESP-3DES-SHA
     reverse-route
    crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1
    crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1
    crypto map SDM_CMAP_1 client configuration address respond
    crypto map SDM_CMAP_1 11 ipsec-isakmp
     description ****
     set peer ****
     set transform-set esp-aes256-sha
     match address 102
    interface FastEthernet0/0
     description Internet$ETH-WAN$
     ip address ****
     ip nat inside
     ip virtual-reassembly
     speed 100
     full-duplex
     no cdp enable
     crypto map SDM_CMAP_1
    interface FastEthernet0/1
     description ****
     ip address 172.16.156.2 2555.255.255.0
     ip nat outside
     ip virtual-reassembly
     duplex auto
     speed auto
     no cdp enable
    interface FastEthernet0/0/0
     description LAN
    interface FastEthernet0/0/1
     description mpls
     switchport access vlan 100
    interface FastEthernet0/0/2
    interface FastEthernet0/0/3
    interface Vlan1
     description $ES_LAN$
     ip address ****
     ip nat inside
     ip virtual-reassembly
    interface Vlan100
     description mpls
     ip address ****
     ip nat inside
     ip virtual-reassembly
    ip local pool SDM_POOL_1 192.168.2.1 192.168.2.5
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 **** name default_route
    ip route 10.0.0.0 255.255.254.0 190.3.65.57 
    ip route 10.0.2.0 255.255.255.0 10.0.254.9 
    ip route 10.0.3.0 255.255.255.0 10.0.254.9 
    ip route 10.0.254.0 255.255.255.248 10.0.254.9 
    ip route 10.48.25.0 255.255.255.0 172.16.156.1 
    ip route 10.92.16.0 255.255.255.0 172.16.156.1 
    ip route 10.92.17.0 255.255.255.0 172.16.156.1 
    ip route 10.92.24.0 255.255.255.0 172.16.156.1 
    ip route 10.92.48.0 255.255.255.0 172.16.156.1 
    ip route 10.92.49.0 255.255.255.0 172.16.156.1 
    ip route 10.92.50.0 255.255.255.0 172.16.156.1 
    ip route 10.92.55.0 255.255.255.0 172.16.156.1
    ip route 170.51.242.0 255.255.255.0 172.16.156.1
    no ip http server
    ip http authentication local
    ip http secure-server
    ip http timeout-policy idle 60 life 86400 requests 10000
    ip nat pool nat-claro 172.16.156.2 172.16.156.200 netmask 255.255.255.0
    ip nat pool nat-claro-chaco 172.16.157.2 172.16.157.200 netmask 255.255.255.0
    ip nat inside source route-map ****
    ip nat inside source route-map ****
    logging trap notifications
    logging 10.20.1.234
    access-list 100 remark SDM_ACL Category=4
    access-list 100 permit ip 10.20.0.0 0.0.255.255 any
    access-list 100 permit ip 172.16.156.0 0.0.0.255 any
    access-list 101 remark SDM_ACL Category=18
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.80
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.177
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.17.234
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.4
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.51
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.52
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.243
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.242
    access-list 101 permit ip 10.20.0.0 0.0.255.255 10.92.48.0 0.0.0.255
    access-list 101 permit ip 10.20.0.0 0.0.255.255 10.92.49.0 0.0.0.255
    access-list 101 permit ip 10.20.0.0 0.0.255.255 10.92.50.0 0.0.0.255
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.55.11
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 170.51.242.162
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.55.12
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.55.13
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.55.21
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.55.15
    access-list 101 permit ip 10.20.0.0 0.0.255.255 host 10.92.16.86
    access-list 101 permit ip 10.0.0.0 0.255.255.255 host 10.92.55.16
    access-list 102 permit ip 10.20.0.0 0.0.255.255 10.0.0.0 0.0.1.255
    access-list 102 permit ip 10.92.0.0 0.0.255.255 10.0.0.0 0.0.1.255
    access-list 102 permit ip 10.20.0.0 0.0.255.255 192.168.10.0 0.0.0.255
    access-list 102 permit ip 10.92.0.0 0.0.255.255 192.168.10.0 0.0.0.255
    access-list 102 permit ip 10.0.2.0 0.0.0.255 10.0.0.0 0.0.1.255
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.16.80
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.16.177
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.17.234
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.16.4
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.16.51
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.16.52
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.16.243
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.16.242
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.16.80
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.16.243
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.16.242
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.55.15
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.55.15
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.16.80
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.16.177
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.17.234
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.16.177
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.17.234
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.16.4
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.16.51
    access-list 103 permit ip 10.0.2.0 0.0.0.255 host 10.92.16.52
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.16.4
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.16.51
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.16.52
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.16.243
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.16.242
    access-list 103 permit ip 10.0.3.0 0.0.0.255 host 10.92.55.15
    access-list 103 permit ip 10.0.0.0 0.0.1.255 host 10.92.55.21
    access-list 104 permit ip 10.20.0.0 0.0.255.255 10.0.2.0 0.0.0.255
    access-list 104 permit ip 10.92.0.0 0.0.255.255 10.0.2.0 0.0.0.255
    no cdp run
    route-map *** permit 10
     match ip address 101
    route-map *** permit 20
     match ip address 103
    !

  • LAN sharing problems w/router, AprtExp, and router

    We have DSL internet service. I recently replaced my router, and upgraded my computers to 10.5.2 (from 10.4.x).
    The router: D-link EBR-2310 (4 port wired router)
    Three computers:
    1] PowerBook - AirPort to APExp
    2] Mini - AirPort to APExp
    the Airport Express is connected in Bridge mode by Ethernet to the router. It also has a USB printer connected
    3] MacPro - Ethernet to router
    So:
    All three computers can interact normally with the WAN (browsing, iChat, FTP).
    At the LAN level, the PowerBook and Mini can both see the MacPro (in the Network browser)(all three computers have File Sharing On) and are able to access the printer.
    The problem: The MacPro doesn't see any of the other computers OR the printer.
    I am able to log into the MacPro from the PowerBook, but the MacPro can't see the PowerBook (or Mini) going the other way. I am also unable to access the printer from the MacPro.
    I hope I explained this clearly enough -- I'm stumped -- any suggestions? Perhaps something on the D-Link router?
    --Hans

    The router must have reset. If it's possible while doing this have any laptop wired to the router otherwise you will have to reconnect after changing the ssid and enabling sercurity.
    Open your browser and go to http://192.168.1.1 don't mind the username just enter admin for the password. Click on wireless, change the ssid and click save settings. Look for Wireless Security, enable wpa2 enter a your desired network key (8-63 alphanumeric characters). Click save settings and reconnect to your wireless network.
    Note: Use WPA2 if your wireless devices support it if not use WPA.

  • How is NTP reply routed when requesting router uses loopback as source address

    The Cisco NTP Best Practices White Paper and DISA STIGs recommend setting the NTP source address to a loopback interface (e.g. "ntp source loopback0").
    But this only seems to work if the requesting (NTP client) router is the default gateway for the NTP server. 
    Specifically, the NTP server will attempt to reply to the requesting router's loopback-based source address (taken from the NTP request packet).  Since that address will always be non-local from the perspective of the NTP server, the NTP server will encapsulate the reply in a Layer 2 frame addressed to its default gateway.  If the gateway was the source of the original NTP request, that should work.  But in most other situations that gateway won't know how to reach a loopback-based address, and will discard the reply.
    I have verified this in tests with routers running both 12.4 and 15.1 releases (and NTP debugging enabled).  When the NTP source is a loopback address, NTP replies never reach the requesting router.  With the default NTP source address (i.e. based on the exit interface) everything works fine.
    Obviously, you could employ workarounds, such as static routes or injecting loopback addresses into your routing protocols.  But that seems uglier than leaving NTP source addresses at their defaults.
    Why is this "best practice" so commonly advocated without mention of some significant caveats regarding routing?  Am I missing something? 
    Thanks,
      Mark

    Michel:
    Thanks for the response.  Actually, I understand what kind of routing workarounds could allow NTP to function in spite of this "best practice."  But I am mystified as to why a Cisco "NTP best practice" paper (http://www.cisco.com/en/US/tech/tk869/tk769/technologies_white_paper09186a0080117070.shtml) and various security policies would call for setting a loopback address as the NTP source when that practice will often cause more problems than it solves.
    The stability of a loopback address is nice when that address is used to uniquely identify the platform for a routing protocol or syslog.  A loopback-based source address can also simplify ACL management, since that address won't change if an interface or link failure forces the router to send traffic from a different interface.  But I keep seeing security configuration guides/policies that call for also using a loopback address as the source for two-way protocols, such as FTP and NTP. That just doesn't make sense to me when you balance the routing implications against the limited security benefits (stable device identification, simplified ACL maintenance, and obfuscation of device addresses).
    I was hoping to learn that some obscure command might allow me to control which NTP exchanges use the loopback-based source address.  For example, the loopback source address would work fine on outgoing NTP broadcasts (and probably in replies from NTP servers).  But I would prefer that NTP client requests use a source address based on the exit interface. That way replies can be routed back to the client without cluttering up routing tables with routes to loopback addresses.
    So far, it looks like I'll need to chalk this up to poor coordination between the network security and network administration communities.
    Thanks again,
      Mark

Maybe you are looking for